Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.
vaimo/composer-patches erreicht einen Gesundheitsindex von 71 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Engineering Quality (84/100) ab, am schwächsten bei AI Readiness (41/100). Zuletzt heute aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.
71
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
71
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25
Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
3
affected_packages
1
assessed_packages
49
unassessed_packages
5
affected_by_severity
high 1
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 49 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. 5 konnten nicht bewertet werden — keine aufgelöste Version, ein nicht unterstütztes Ökosystem oder außerhalb der ausgewiesenen Paketliste. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Typprüfbarer Code — PHP ohne Typprüfungs-Konfiguration
55/55
Handhabbare Dateigrößen — 0/170 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
PHP
largest_source_bytes
13.259
source_files_sampled
170
oversized_source_files
0
Eckdaten
304GitHub-Sterne
36Mitwirkende
40Commits, letzte 12 Monate
0Tage seit letztem Push
65Releases
2Bus-Faktor
31offene Issues
PackagistPaket-Ökosysteme
Weitere Details
Stern- und Fork-Verlauf 304 ★ / 45 ⇿
304Sterne
45Forks
65Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 3Minor 28Patch 34
Jeder Punkt umfasst 9 Tage.
OpenSSF Scorecard 4.6 / 10
4.6Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-22 05:49 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 5 direkte und 49 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
Packagist
loophp/phposinfo
1.8.0
direkt
Packagist
seld/jsonlint
1.11.0
direkt
Packagist
symfony/console
8.0.11
direkt
Packagist
vaimo/topological-sort
—
direkt
Packagist
vaimo/topological-sort
2.0.1
direkt
Packagist
camspiers/json-pretty
1.0.2
indirekt
Packagist
composer-plugin-api
—
indirekt
Packagist
composer/ca-bundle
1.5.11
indirekt
Packagist
composer/class-map-generator
1.7.3
indirekt
Packagist
composer/composer
2.9.8
indirekt
Packagist
composer/metadata-minifier
1.0.0
indirekt
Packagist
composer/pcre
3.3.2
indirekt
Packagist
composer/semver
3.4.4
indirekt
Packagist
composer/spdx-licenses
1.6.0
indirekt
Packagist
composer/xdebug-handler
3.0.5
indirekt
Packagist
justinrainbow/json-schema
6.8.2
indirekt
Packagist
marc-mabe/php-enum
4.7.2
indirekt
Packagist
mustache/mustache
3.2.0
indirekt
Packagist
pdepend/pdepend
2.16.2
indirekt
Packagist
phpcompatibility/php-compatibility
—
indirekt
Packagist
phpcompatibility/php-compatibility
9.3.5
indirekt
Packagist
phpmd/phpmd
2.15.0
indirekt
Packagist
psr/container
2.0.2
indirekt
Packagist
psr/log
3.0.2
indirekt
Packagist
react/promise
3.3.0
indirekt
Packagist
seld/phar-utils
1.2.1
indirekt
Packagist
seld/signal-handler
2.0.2
indirekt
Packagist
squizlabs/php_codesniffer
—
indirekt
Packagist
squizlabs/php_codesniffer
3.13.5
indirekt
Packagist
symfony/config
7.4.10
indirekt
Packagist
symfony/dependency-injection
7.4.10
indirekt
Packagist
symfony/deprecation-contracts
3.7.0
indirekt
Packagist
symfony/filesystem
7.4.11
indirekt
Packagist
symfony/finder
8.0.8
indirekt
Packagist
symfony/polyfill-ctype
1.37.0
indirekt
Packagist
symfony/polyfill-intl-grapheme
1.37.0
indirekt
Packagist
symfony/polyfill-intl-normalizer
1.37.0
indirekt
Packagist
symfony/polyfill-mbstring
1.37.0
indirekt
Packagist
symfony/polyfill-php73
1.37.0
indirekt
Packagist
symfony/polyfill-php80
1.37.0
indirekt
Packagist
symfony/polyfill-php81
1.37.0
indirekt
Packagist
symfony/polyfill-php84
1.37.0
indirekt
Packagist
symfony/process
8.0.11
indirekt
Packagist
symfony/service-contracts
3.7.0
indirekt
Packagist
symfony/string
8.0.11
indirekt
Packagist
symfony/var-exporter
8.0.9
indirekt
Packagist
vaimo/composer-changelogs
2.0.0
indirekt
Packagist
vaimo/composer-patches-local
—
indirekt
Packagist
vaimo/composer-patches-proxy
1.0.0
indirekt
Packagist
vaimo/composer-patches-target1
1.0.0
indirekt
Packagist
vaimo/composer-patches-target2
1.2.0
indirekt
Packagist
vaimo/composer-patches-target3
1.2.3
indirekt
Packagist
vaimo/patches-file-owner
1.0.0
indirekt
Packagist
vaimo/patches-search-owner
1.0.0
indirekt
Abhängigkeits-Advisories 1
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 49 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 1 tragen bekannte Advisories, davon 0 direkte. 5 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.
Paket
Version
Beziehung
Schweregrad
Advisories
Behoben in
composer/composer
2.9.8
indirekt
hoch
3
2.10.2
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"is_fork": false,
"size_kb": 1929,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 344951,
"Shell": 31143
},
"pushed_at": "2026-07-22T05:48:39Z",
"created_at": "2016-02-23T10:04:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T13:20:13Z",
"description": " Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://www.vaimo.com",
"name": "Vaimo",
"type": "Organization",
"login": "vaimo",
"company": null,
"location": "Stockholm, Sweden",
"followers": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/1503275?v=4",
"created_at": "2012-03-05T15:30:37Z",
"is_verified": null,
"public_repos": 117,
"account_age_days": 5251
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "5.6.1",
"kind": "patch",
"published_at": "2026-06-12T07:55:43Z"
},
{
"tag": "6.0.2",
"kind": "patch",
"published_at": "2026-06-12T07:56:54Z"
},
{
"tag": "6.0.1",
"kind": "patch",
"published_at": "2026-03-02T08:15:06Z"
},
{
"tag": "6.0.0",
"kind": "major",
"published_at": "2026-02-03T05:55:09Z"
},
{
"tag": "5.6.0",
"kind": "minor",
"published_at": "2026-01-29T13:33:48Z"
},
{
"tag": "5.5.4",
"kind": "patch",
"published_at": "2025-08-01T12:32:37Z"
},
{
"tag": "5.5.3",
"kind": "patch",
"published_at": "2025-07-30T11:05:15Z"
},
{
"tag": "5.5.2",
"kind": "patch",
"published_at": "2025-07-18T11:01:37Z"
},
{
"tag": "5.5.1",
"kind": "patch",
"published_at": "2025-07-14T09:41:39Z"
},
{
"tag": "5.5.0",
"kind": "minor",
"published_at": "2025-07-14T07:48:55Z"
},
{
"tag": "5.4.0",
"kind": "minor",
"published_at": "2025-06-04T12:21:26Z"
},
{
"tag": "5.3.1",
"kind": "patch",
"published_at": "2025-06-03T09:45:21Z"
},
{
"tag": "5.3.0",
"kind": "minor",
"published_at": "2025-06-02T10:34:34Z"
},
{
"tag": "5.2.2",
"kind": "patch",
"published_at": "2025-06-02T05:56:15Z"
},
{
"tag": "5.2.1",
"kind": "patch",
"published_at": "2025-04-17T11:31:51Z"
},
{
"tag": "5.2.0",
"kind": "minor",
"published_at": "2024-04-18T10:15:09Z"
},
{
"tag": "5.1.2",
"kind": "patch",
"published_at": "2023-11-22T15:08:20Z"
},
{
"tag": "5.1.1",
"kind": "patch",
"published_at": "2023-03-09T06:28:31Z"
},
{
"tag": "5.1.0",
"kind": "minor",
"published_at": "2022-07-08T11:09:43Z"
},
{
"tag": "5.0.0",
"kind": "major",
"published_at": "2022-05-13T10:32:35Z"
},
{
"tag": "4.22.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:06Z"
},
{
"tag": "3.53.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:35Z"
},
{
"tag": "4.22.3",
"kind": "patch",
"published_at": "2021-02-24T14:55:22Z"
},
{
"tag": "3.53.3",
"kind": "patch",
"published_at": "2021-02-24T14:57:04Z"
},
{
"tag": "4.22.2",
"kind": "patch",
"published_at": "2021-02-24T01:48:59Z"
},
{
"tag": "3.53.2",
"kind": "patch",
"published_at": "2021-02-24T01:38:10Z"
},
{
"tag": "4.22.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:43Z"
},
{
"tag": "3.53.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:12Z"
},
{
"tag": "4.22.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:46Z"
},
{
"tag": "3.53.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:08Z"
},
{
"tag": "4.21.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:26Z"
},
{
"tag": "3.52.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:00Z"
},
{
"tag": "4.21.0",
"kind": "minor",
"published_at": "2021-02-04T13:02:37Z"
},
{
"tag": "3.52.0",
"kind": "minor",
"published_at": "2021-01-31T12:23:05Z"
},
{
"tag": "4.16.1",
"kind": "patch",
"published_at": "2019-06-19T13:03:07Z"
},
{
"tag": "4.16.0",
"kind": "minor",
"published_at": "2019-04-09T21:36:43Z"
},
{
"tag": "4.15.0",
"kind": "minor",
"published_at": "2019-04-03T11:44:57Z"
},
{
"tag": "4.12.0",
"kind": "minor",
"published_at": "2019-04-01T05:56:04Z"
},
{
"tag": "4.11.0",
"kind": "minor",
"published_at": "2019-03-21T02:27:34Z"
},
{
"tag": "3.42.2",
"kind": "patch",
"published_at": "2019-03-21T02:26:56Z"
},
{
"tag": "4.6.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:31Z"
},
{
"tag": "3.37.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:49Z"
},
{
"tag": "4.5.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:01Z"
},
{
"tag": "3.36.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:21Z"
},
{
"tag": "4.4.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:11Z"
},
{
"tag": "3.35.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:31Z"
},
{
"tag": "4.4.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:31Z"
},
{
"tag": "3.35.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:50Z"
},
{
"tag": "4.4.1",
"kind": "patch",
"published_at": "2018-09-10T21:36:26Z"
},
{
"tag": "3.35.1",
"kind": "patch",
"published_at": "2018-09-10T21:37:02Z"
},
{
"tag": "4.4.0",
"kind": "minor",
"published_at": "2018-09-10T19:05:25Z"
},
{
"tag": "3.35.0",
"kind": "minor",
"published_at": "2018-09-10T19:06:02Z"
},
{
"tag": "4.3.0",
"kind": "minor",
"published_at": "2018-09-02T09:17:16Z"
},
{
"tag": "4.2.0",
"kind": "minor",
"published_at": "2018-08-22T01:37:40Z"
},
{
"tag": "4.1.1",
"kind": "patch",
"published_at": "2018-08-16T12:36:56Z"
},
{
"tag": "4.1.0",
"kind": "minor",
"published_at": "2018-08-16T12:37:37Z"
},
{
"tag": "4.0.0",
"kind": "major",
"published_at": "2018-08-15T20:07:13Z"
},
{
"tag": "3.31.0",
"kind": "minor",
"published_at": "2018-08-15T22:17:43Z"
},
{
"tag": "3.30.0",
"kind": "minor",
"published_at": "2018-08-14T18:36:56Z"
},
{
"tag": "3.29.1",
"kind": "patch",
"published_at": "2018-08-12T11:58:44Z"
},
{
"tag": "3.29.0",
"kind": "minor",
"published_at": "2018-08-12T09:47:30Z"
},
{
"tag": "3.28.1",
"kind": "patch",
"published_at": "2018-08-10T10:38:04Z"
},
{
"tag": "3.27.0",
"kind": "minor",
"published_at": "2018-05-18T10:48:04Z"
},
{
"tag": "3.26.0",
"kind": "minor",
"published_at": "2018-05-16T11:03:44Z"
},
{
"tag": "3.24.1",
"kind": "patch",
"published_at": "2018-03-02T09:25:53Z"
}
],
"recent_commits": [
{
"oid": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"body": "…d-output\n\nUse stdout only when reusing patch command output",
"is_bot": false,
"headline": "Merge pull request #155 from coding46/fix/separate-stderr-from-comman…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-12T06:43:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a349355d805523d4b6479f698a609b975fa9ba1f",
"body": "Previous patch operations store their process output and interpolate that\nresult into later commands.\n\nThis breaks when a command that resolves a reusable value, such as a\npatch binary path, writes diagnostic output to stderr while still\nreturning a valid result on stdout. In that case the mixed out\n[…]\npagate stdout as the reusable operation result.\n\nAdd a scenario test that reproduces this by resolving the patch binary\nthrough a command that writes a warning to stderr and the binary path to\nstdout.",
"is_bot": false,
"headline": "Use stdout only when reusing patch command output",
"author_name": "Göran Bodenschatz",
"author_login": "coding46",
"committed_at": "2026-06-08T12:13:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42b55379e47b80a52fa6e43b66e4f47d6a7f8d61",
"body": "Feature/Composer 2.10 (master)",
"is_bot": false,
"headline": "Merge pull request #153 from vaimo/feature/composer-210-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-04T10:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17d8679ee3bfd83c4b19c47650ad368cf582d080",
"body": "…orkflows to check for Composer 2.10. No changes necessary for 2.10 in the application code.",
"is_bot": false,
"headline": "Updated dependency whitelists to include symfony/console 8, updated w…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-06-04T08:53:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e902264334275ecb8e0299b0a232caf49ea3fd",
"body": "Updated lock file and workflows config with latest Composer versions (master)",
"is_bot": false,
"headline": "Merge pull request #152 from vaimo/chore/composer-update-may-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-05-18T06:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31dabb6b2f5ff9e8b066a5342f7f5e1ebeb3a772",
"body": null,
"is_bot": false,
"headline": "Updated lock file and workflows config with latest Composer versions",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-05-18T05:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21ac4b65854d91d149ab2da7ae0866568aed56cd",
"body": "Chore/update composer (master)",
"is_bot": false,
"headline": "Merge pull request #150 from vaimo/chore/composer-update-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-04-17T09:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464f864f2cc5a37c147a25fbd733b9b9078d1728",
"body": "…rms from security audits. Updated the workflows config to use latest Composer versions since these days the pick is between 2.2 and 2.9 anyway, the versions in between are not relevant to be tested.",
"is_bot": false,
"headline": "Updated lock file with latest Composer version to eliminate false ala…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-04-17T09:13:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a61db92824a6e934ad0a5b9358a164e61881363",
"body": null,
"is_bot": false,
"headline": "Updated changelog files with latest information",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:57:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbefaec8d272d1e375c39f8ae2cfc094247eb5f",
"body": "Feature/changelogs package update",
"is_bot": false,
"headline": "Merge pull request #147 from vaimo/feature/changelogs-package-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-03-02T07:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4088b91d42a8ee29d9f6fa7565de04d94a56205a",
"body": "… anymore",
"is_bot": false,
"headline": "Updated Github workflows config to not drop vaimo/composer-changelogs…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3064834a484c9fccb3d9bbc5d7343fbe2d62d3db",
"body": "…mo/composer-changelogs, which is compatible with PHP 7.1 - 8.5.",
"is_bot": false,
"headline": "Updated the dev requirements to allow installing newer version of vai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:35:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbd8bed2204e6a47672572a3857fca5706d76d12",
"body": "Feature/symfony console 8",
"is_bot": false,
"headline": "Merge pull request #146 from vaimo/feature/symfony-console-8",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-03T05:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5efa616383256a6699248e789e13933e6df68955",
"body": "…ssues with Composer config.platform.php causing issues when the version is too loose.",
"is_bot": false,
"headline": "Updated Github Workflows to use more specific PHP versions to avoid i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T09:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d761927f2ae943ff11ca1fdcce48abf85322d9d8",
"body": "…nce vaimo/composer-changelogs really needs maintenance for wider range of PHP version support.",
"is_bot": false,
"headline": "Updated changelog.json with version 6.0 info, not able to apply it si…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T08:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58111a8c1691c980fde70217093ecb4da4808f91",
"body": null,
"is_bot": false,
"headline": "Removed PHP 7.0 from workflows, updating documentation",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:34:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2001f59d5dfef84f07a36e00208c19093441f2c",
"body": "…s breaking change and will not work on PHP 7.0",
"is_bot": false,
"headline": "Updated Composer command classes with appropriate return type, this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dec426ef53b4361d4527cdf5fe882b63080ea225",
"body": "… 3 support in favor of symfony/console 8. Composer 1 we can't anyway guarantee to work anymore and the whatever support there is should still be available in version 5 of the patcher.",
"is_bot": false,
"headline": "Updated composer.json to drop PHP 7.0, Composer 1 and symfony/console…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T06:51:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d007e2a3e5202b6c8a8ebce352b0a90e92e3544",
"body": "Feature/php85",
"is_bot": false,
"headline": "Merge pull request #144 from vaimo/feature/php85",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-02T06:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32b208fff8f915366991a39e30c9045c1b8cd927",
"body": "…ce in the first place, removed the verbosity from install command. The PHP 7.0 slowness needs to be looked at later.",
"is_bot": false,
"headline": "Removed the caching from Github workflows since this made no differen…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T13:42:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c39c590eaf005a56dd98e1fd81c57e1b9a44297",
"body": "…ws, we don't need Xdebug etc at the moment",
"is_bot": false,
"headline": "Testing disabling coverage from the PHP images used in Github workflo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T12:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08a029fe74c339b8a1133f4a2281f84851f0c754",
"body": "…shivammathur/setup-php, not sure why we didn't apply this in the first place",
"is_bot": false,
"headline": "Applying cache for Composer in Github workflows based on examples in …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "776ba2093ea1be4b592955d8890355d1ab1ab819",
"body": "…what's the bottleneck with slow PHP 7.0 test performance (doesn't replicate locally)",
"is_bot": false,
"headline": "In Github workflows increasing verbosity of 'composer update' to see …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94b55789af3d5513f97393de7d3fc1aae9c24136",
"body": "… by the constraints at this time. Should reduce false alarms from dependabot.",
"is_bot": false,
"headline": "Updated composer.lock to be based on latest possible packages allowed…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fc9f62640250de91b97c98e244b4efd72d8bc51",
"body": "…oser versions in general a bit",
"is_bot": false,
"headline": "Updated workflows to include checking for PHP 8.5, adjusting the Comp…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f06b94ab30e1e792dc06c8a5045960c62ca84b62",
"body": "feat: symfony > 7 compat",
"is_bot": false,
"headline": "Merge pull request #139 from KDederichs/feat/sf8_compat",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T13:26:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d8a1dad04e6cf5c368c09260b43d047f3b76a74",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22890ab51a487e96ede37de3a2a24573de6c7b40",
"body": "…ny/console, added new PHPCS whitelist for symfony/console 7 for the dependency checker",
"is_bot": false,
"headline": "Updated testsuite to ignore some deprecation notices related to symfo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T12:22:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d469dc8fa4e8aff86a5acfacde70f7653f1763f0",
"body": null,
"is_bot": false,
"headline": "feat: symfony add compat for Symfony 3, 4, 5 and 7",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:02:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b6907a05d1c233dd064d0dde77ab9cf1aa51b10",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T11:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e345177de2348683c4ddc57129e5d01286b1b0",
"body": "…oser-1\n\nDropping Composer 1 from Github workflows setup",
"is_bot": false,
"headline": "Merge pull request #142 from vaimo/feature/github-workflows-drop-comp…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T05:54:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "121a22ef78baed100a60f13b87b8ed9066d6fd42",
"body": "…n working for a while. Composer 1 support otherwise not touched, we just won't be able to confirm if any future changes still actually work with it. Replaced also Composer 2.8 usage with 2.9, but didn't touch the <2.8 versions for now to have wider test coverage for different versions.",
"is_bot": false,
"headline": "Updated Github workflows to not use Composer 1, since this hasn't bee…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-28T11:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "210f39c86f597c2b29d9a06feb49fe94c35bcabb",
"body": null,
"is_bot": false,
"headline": "feat: symfony > 7 compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2025-12-13T15:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa96411d2ebe60ea4431a8f3cba414e37b47908c",
"body": "Feature/topological sort update",
"is_bot": false,
"headline": "Merge pull request #135 from vaimo/feature/topological-sort-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-08-01T12:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef13502de186199f2ad35b4d5fe6ee6c684c52ee",
"body": "…o functional change but output checks included the version of the package",
"is_bot": false,
"headline": "Adjusted tests to work with the new vaimo/topological-sort version, n…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T12:03:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2b1c08dce65305d3b4f3da21ba3ab8b44c3e15d",
"body": "….0.0 of the package as well. This should have latest changes from its parent repo but also still support same PHP versions as this package. The package should also come with updated autoload config that better works with dependency checks happening in this package.",
"is_bot": false,
"headline": "Updated dependency to vaimo/topological-sort to allow using version 2…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T11:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3681f46b4bf6170236124fadb09866fa17a67b7",
"body": null,
"is_bot": false,
"headline": "License file update",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:14:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b77233d251a2534a0f3eaa52d7670a40a00abe86",
"body": null,
"is_bot": false,
"headline": "Updated changelog and development docs",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ed64d242258f1757e88cb9dad3d175e983461d5",
"body": "…sion-checks\n\nFix/Invalid Composer version checks",
"is_bot": false,
"headline": "Merge pull request #134 from vaimo/fix/issue-122-invalid-composer-ver…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-30T11:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113cf6368bd8a64a1fdc242fd45b8d1c5bab97d9",
"body": "…RSION constant as the static method seems to return much more usable version number for comparison purposes, while VERSION may not contain version number at all in preview builds",
"is_bot": false,
"headline": "Updated Composer version checks to use getVersion() instead of the VE…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-30T10:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "506a088413ccb7bdd9b91be468929a25052e0200",
"body": "…ased on composer.json",
"is_bot": false,
"headline": "Updating changelog files, ensuring that composer.lock is up to date b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-18T10:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "724be3acedf5e55ce0b2be17c256c12ba89681a3",
"body": "…-during-package-reset\n\nFix incorrect handling of promises during package reset",
"is_bot": false,
"headline": "Merge pull request #124 from vaimo/fix/incorrect-handling-of-promises…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-18T10:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa8cef59c5ca663cade809d8f2661e64863763ee",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T10:25:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "311cf7d8b204fd4fddf6d3540d027a9cb46e5274",
"body": "Fix/issue 132 phposinfo compatibility",
"is_bot": false,
"headline": "Merge pull request #133 from vaimo/fix/issue-132-phposinfo-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T09:36:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1faf5a7174ba5c56269eee7f4e4bac61cec05e7",
"body": null,
"is_bot": false,
"headline": "Ignored warning from phpcs related to the class aliases",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15b62b61f806fbdc21c32199c4d306a88e0d1ed8",
"body": "… back to src/Config/Context.php. The autoloader approach is not valid in Composer plugin context where the workaround is required already when installing the module, as autoloader configs apply only after the packages are installed. Relates to issue https://github.com/vaimo/composer-patches/issues/132",
"is_bot": false,
"headline": "Replaced the compatibility.php workaround by adding the class aliases…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dd06f1d5336e1f25740b1de3ae9528a2949986d",
"body": "Feature/pr 129 tests",
"is_bot": false,
"headline": "Merge pull request #131 from vaimo/feature/pr-129-tests",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:47:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f85da01741e795045ab803cba97905e9e67f11c",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/pr-129-tests",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d74b20b30f916f1f34744bc873b3fef53c9630e",
"body": "Add negated dependency support",
"is_bot": false,
"headline": "Merge pull request #129 from adamj88/depends-exclusion",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b05f05fb257e6cb08d18de1e5f1e524a47076039",
"body": "…ll/129, adjusting other tests",
"is_bot": false,
"headline": "Preparing test cases for https://github.com/vaimo/composer-patches/pu…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-06T12:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8edab0256633432985f522e59707d9baff13264c",
"body": null,
"is_bot": false,
"headline": "Add negated dependency support",
"author_name": "Adam Johnson",
"author_login": "adamj88",
"committed_at": "2025-06-05T15:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b54c9fdf474dd4b73f9601e7d6f4bc16c3c5526a",
"body": null,
"is_bot": false,
"headline": "Fixed loose formatting issue in the changes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:26:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c08af5b8c33a0f9fdef9a104163d34de3550fd2",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98d94b30fde364fe4f55e797e7ccd5543e205744",
"body": null,
"is_bot": false,
"headline": "Updated changelog.json with 5.4.0 release notes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b4ba350a9bfe41d07261a38006667e595dba4f",
"body": "Feature/package maintenance",
"is_bot": false,
"headline": "Merge pull request #125 from vaimo/feature/package-maintenance",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-04T11:54:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ef29be7408a434e8daa68dc0775d4a19e55222a",
"body": "…sable, it does help reducing costs. Also updated missing releases from changelog.json.",
"is_bot": false,
"headline": "Added back fail fast strategy since although this can be useful to di…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T11:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47bd2cbdb31eb98668461cb7b9f14f5b6ffd9be",
"body": "…0 in composer.json as platform seems to give you older Symfony version which causes inconsistent outputs in Composer 1",
"is_bot": false,
"headline": "Updated workflow with specific PHP 7.0 version, since setting just 7.…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "632bf79e13a60521c378a58f297c351bc673f9bb",
"body": "…from https://github.com/vaimo/composer-patches/pull/127 are pretty simple to include. Included also PHP 7.0 support back, since the PHP 8.4 compatibility changes from https://github.com/vaimo/composer-patches/pull/121 were possible to achieve another way. Updated Github workflow to include more PHP\n[…]\n earlier. Updated dependency whitelists based on the older versions, looks like symfony/console has lots of incompatibilities that have been suppressed with function_exists and autoloader workarounds.",
"is_bot": false,
"headline": "Bringing back compatibility with past PHP versions since the changes …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:02:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "66353aea7d0a89d85a1180f2eb30240e76e37cc0",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55eb5a5347a20ef6bf662204f1f4bd8b22ca8f89",
"body": "Fix/php backwards compatibility",
"is_bot": false,
"headline": "Merge pull request #127 from vaimo/fix/php-backwards-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-03T09:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c39b93e269d7a2de9965bf28ef36e4b5bcb6404",
"body": "…ecame the case already earlier when PHP 8.4 compatibility changes were implemented.",
"is_bot": false,
"headline": "Updated minimum PHP version requirement to 7.1, since this actually b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e077f73081cd903c596f2e4b13a608de2d4ce9",
"body": "…sinfo versions 1.6 and 1.7, previously we were locked to 1.7 despite composer.json allowing installing 1.6. Updated also src/Utils/FileSystemUtils.php to use array_merge instead of merging arrays through spread operators, since latter is only supported in PHP 7.4.",
"is_bot": false,
"headline": "Updated src/Config/Context.php with workaround to support loophp/phpo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T08:07:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "384b76eed2dcc5d79c618274ffc4d6c8d4b6accf",
"body": "…sues found by code analysis after merging latest changes to the branch, added alternative solution for https://github.com/vaimo/composer-patches/pull/110 and updated test to check for the solution",
"is_bot": false,
"headline": "Updated bin/test to allow rendering debug outputs in tests, fixing is…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T07:14:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1267a528025f5583c3b304a3c9c1471c859c1b7e",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d41c3cad985b5e192f0f08a6ab955cf7370087e",
"body": "… based on some new changes in master branch",
"is_bot": false,
"headline": "Removing invalid whitespaces in documentation, added also information…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f674021cdf51727fdc8cc4357afdf7d5fb78af49",
"body": "Allow wildcard in patches search folder path",
"is_bot": false,
"headline": "Merge pull request #86 from indykoning/feature/glob-folder-path",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T10:33:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f7dbe5e2dec065768a7b7f8b483a6f332c9d69c",
"body": null,
"is_bot": false,
"headline": "Moved globbing to FileSystemUtils implementing the GlobIterator",
"author_name": "indykoning",
"author_login": "indykoning",
"committed_at": "2025-06-02T07:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5393df08cc08f42315ae348ab92f75f79e18cd4",
"body": null,
"is_bot": false,
"headline": "Documentation updates in docs/DEVELOPMENT.md",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T07:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf4bf96a6bd74c685758cbf5e9f3eecb6815045",
"body": "…tinued\n\nFeature/lock data type changes continued",
"is_bot": false,
"headline": "Merge pull request #126 from vaimo/feature/lock-data-type-changes-con…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:52:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bd598be362f692d426b168c4ff0f4e519e5acc6",
"body": "…ull/123 further by implementing the data type fix from Composer itself in src/Repository/Lock/Sanitizer, which should ensure the data types remain consistent in composer.lock even if the Sanitizer does need to do changes",
"is_bot": false,
"headline": "Refined the solution from https://github.com/vaimo/composer-patches/p…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T05:50:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46927d29cd9f0e2c948fd7495d1e38fc8258cbf8",
"body": "Only rewrite lockfile if the data has changed",
"is_bot": false,
"headline": "Merge pull request #123 from fredden/feature/lock-data-type-changes",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0697e9bb219dd60c9fd60c6846da7b94b3d90200",
"body": "…ests",
"is_bot": false,
"headline": "Workflow seems to work now, changing trigger to be based on pull requ…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e05a17a7d52abc85d310d12ed3e9907566c39da",
"body": "…the duplicate error. This can affect more relevant errors, but at least the change is specific to the three tests were the error appears in",
"is_bot": false,
"headline": "Instead of depending on specific react/promise version, filtered out …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:37:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88bdec33e98b30f5260a9e9fcb09f8167fb40e73",
"body": "…mpatible with PHP 8.4",
"is_bot": false,
"headline": "Dropping the react/promise dev requirement since 2 is not actually co…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35abfd8bc88197ab41276a2f61a5ba92cfa3dc0f",
"body": "…t, since they started requiring react/promise 3",
"is_bot": false,
"headline": "Updating workflow further to drop the Composer 2.7 versions down a bi…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:14:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c4c3a3222d772d79e3cc7ee310dafdca4ca5ed",
"body": "…ple 2.8.9 has support for react/promise 2 still",
"is_bot": false,
"headline": "Updating workflow to use latest patch versions for Composer, for exam…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "378a0ba8438d9933409da6153d6acdc31193b24d",
"body": "…poser 2.7, adjusting some of the test scenarios to be more flexible about certain details in the output assertions, added explicit dev requirement for react/promise version 2 since in later Composer versions there's one duplicate error related to unhandled promise rejection which made it hard to make output assertions with",
"is_bot": false,
"headline": "Fixed issue with some of the allow-plugins configs not working in Com…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef1364fe5c35405aa89c0451668efdeb74dc448d",
"body": "…ommit certain errors in Composer that you wouldn't get locally, dropping all .output-v2 files in favour of .output since 8.4 seems to manage to use .output in some cases anyway and we don't currently need differentiating between Composer 1 and 2",
"is_bot": false,
"headline": "Updated workflow configuration with environment variable that should …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T07:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acdeeb58b9ceba975210e1ab82a96aff660f3cfb",
"body": "…st scenario was just affected by incorrect Composer version detection when the test were being run in non-interactive mode",
"is_bot": false,
"headline": "Turns out that the output changes were actually correct, the later te…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T06:29:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5ddc946a5b3c9449e789e87b046d520f29069f6",
"body": "…lines in outputs is not correct way to solve the problem, testing out if dropping the stty calls in bin/test works better since this doesn't seem to work in the workflow",
"is_bot": false,
"headline": "Noticed through a later test scenario output that adding the install …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T12:04:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09b51fd9883a45ace83b19af76249846426f7aca",
"body": null,
"is_bot": false,
"headline": "Adjusting the symfony/console related compatibility whitelist",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:50:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ee628df1ed6ba778b162f2c7e2748ba89d5ef14",
"body": null,
"is_bot": false,
"headline": "Fixed PHP 8 specific issue with patch:validate command",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:38:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b609e36c61009225ecf1802db480346d962900ee",
"body": "… unrecognised",
"is_bot": false,
"headline": "Fixed issue with dependency analysis where empty autoloader paths get…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41ece9f05bd0bf98f27372b5b95c5fa024970655",
"body": "…urrently not compatible with later versions. Adjusting more output expectations in the test scenarios.",
"is_bot": false,
"headline": "Added explicit requirement for symfony/console <7.0, the package is c…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41421a409f92b0c7cf1f73dbdbfd592d2fd631f7",
"body": "…of vaimo/composer-changelogs in workflow since it does not seem to be compatible with newer versions of symfony/console",
"is_bot": false,
"headline": "Adjusting workflow Composer version in PHP 8.2, adding back dropping …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb9062db9865cae14b09ba6c3621aa98a1f814a",
"body": "…ocally can customise mutagen.yml to include version control files to get matching files. Still uncertain where one installation output line is coming from, but for now prioritising the workflow.",
"is_bot": false,
"headline": "Dropped .git removal, opted for adjusting the test outputs instead. L…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6db110632d40be4e5799b35447657f666140e3ef",
"body": "…clone the code, testing out dropping .git folder manually",
"is_bot": false,
"headline": "Adding back actions/checkout in workflow since of course you need to …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eebe31a972c310f90a3c367ae29e3f215856d57a",
"body": "…more explicitly, since this can mismatch with the runner Composer version. Trying out also dropping actions/checkout since this might be more closer to local execution of tests without git.",
"is_bot": false,
"headline": "Adding step in workflow to specify the dev composer/composer version …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5d960a9c8d3c592f977b759eb289515c02146e0",
"body": "…low since former doesn't actually succeed to change the runner PHP version and latter appears to have support for Composer as well",
"is_bot": false,
"headline": "Switched from php-actions/composer to shivammathur/setup-php in workf…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:16:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60c7881eda06010fb6d7ed319fb7f780b0c8049",
"body": "…stallations/",
"is_bot": false,
"headline": "Adding allow-plugins configs in all composer.json files under test/in…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:05:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2378ec20fd7a5434182e6e7e4fdcfec1146c744",
"body": "…ince it seems like 8.3 is getting used, updated test script to not use --no-plugins since this doesn't seem to work in Github workflows and it works locally with and without it",
"is_bot": false,
"headline": "Trying out different PHP version definitions in the workflow config s…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68d1ad43eebfd7300b0d4adcb0c3a8aff3e52665",
"body": null,
"is_bot": false,
"headline": "Setting allow-plugins for sandbox composer.json",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7748a5e8649e6b9bcac32c1f6999dc1ded25985",
"body": "…constraints in test sandbox",
"is_bot": false,
"headline": "Reverted code sniffer update in root composer.json, loosening up the …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50192454920623ce306a8f217a11448fcd5d7bf1",
"body": "…ave some PHP compatibility issues",
"is_bot": false,
"headline": "Bumping up code sniffer version dependency a bit since 2.9 seems to h…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T07:09:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "143109f12e797b4a4388904279262ca39193cb3d",
"body": "…he requirement to version with consistent namespace. Does limit using the package to PHP versions 7.4 and above.",
"is_bot": false,
"headline": "Dropped the loophp/phposinfo compatibility workaround and bumped up t…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d809fe8418021986cc8f9d1ee264bf2020f97337",
"body": "…ying out specifying the allowed plugin in dependency analysis script itself",
"is_bot": false,
"headline": "Updating the root composer.json allow-plugins setting didn't work, tr…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:35:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56ecaa6e6d741c2f3f61b7384a655e1b2fcc10f3",
"body": "…not support latest PHP versions anyway, has also some issues with older versions as well",
"is_bot": false,
"headline": "Dropping sebastian/phpcpd since this is currently abandoned and will …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bbad9f4fd2704f59b9605de29bd2cc0b8854eb1",
"body": null,
"is_bot": false,
"headline": "Flipped the class aliases in loophp/phposinfo compatibility workaround",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4845cfda829730f3648cf590a7f0be1543a46e8b",
"body": "… and 1.7.0, although we could also consider bumping up the version requirement to not need to do this workaround",
"is_bot": false,
"headline": "Added workaround for loopphp/phposinfo namespace change between 1.6.5…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf2ea297eca02612d8bf14c01b5ac83cc4da6e8",
"body": "…s dev dependency and doesn't support PHP <7.4, updated allow-plugins settings",
"is_bot": false,
"headline": "Added dropping of vaimo/composer-changelogs in workflows since this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:02:02Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 65,
"commits_last_year": 40,
"latest_release_at": "2026-06-12T07:55:43Z",
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 8,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "vaimo/composer-patches",
"exists": true,
"license": "MIT",
"keywords": [
"plugin",
"utility",
"tools",
"maintenance",
"utils",
"utilities",
"composer plugin",
"patching",
"backports",
"Fixes",
"version restriction",
"indirect restrictions",
"patch description",
"remote patch files",
"downloaded patches",
"package bug-fix",
"package patches",
"patch exclusion",
"development patches",
"hot-fixes",
"hotfixes",
"environment flags",
"skipped packages",
"patch skipping",
"maintenance tools",
"multiple formats",
"patch branching",
"multi-version patches",
"bundled patches",
"patch command",
"os-specific config",
"configurable patch applier",
"back-ports",
"bulk patches",
"patch header",
"patch meta-data",
"resolve patches",
"patch search",
"patch resolve",
"patcher",
"composer command"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/vaimo/composer-patches",
"is_deprecated": false,
"latest_version": "6.0.2",
"repository_url": "https://github.com/vaimo/composer-patches",
"versions_count": 204,
"total_downloads": 4670819,
"dependents_count": 23,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 91770,
"first_published_at": null,
"latest_published_at": "2026-06-12T06:43:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 39
}
]
},
"popularity": {
"forks": 45,
"stars": 304,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2017-08-27",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2019-02-20",
"count": 1
},
{
"date": "2019-03-29",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-06",
"count": 1
},
{
"date": "2019-11-12",
"count": 1
},
{
"date": "2019-11-19",
"count": 1
},
{
"date": "2020-01-29",
"count": 1
},
{
"date": "2020-04-04",
"count": 1
},
{
"date": "2020-04-29",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2020-12-21",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-02-08",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-05-05",
"count": 1
},
{
"date": "2021-06-07",
"count": 2
},
{
"date": "2021-10-05",
"count": 1
},
{
"date": "2021-12-12",
"count": 1
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-02",
"count": 1
},
{
"date": "2022-03-12",
"count": 1
},
{
"date": "2022-04-12",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2023-02-15",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-03-26",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2025-02-10",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
}
],
"complete": true,
"collected": 43,
"total_forks": 45
},
"star_history": {
"days": [
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-07-30",
"count": 1
},
{
"date": "2017-07-31",
"count": 12
},
{
"date": "2017-08-01",
"count": 1
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-04",
"count": 1
},
{
"date": "2017-08-08",
"count": 1
},
{
"date": "2017-08-14",
"count": 1
},
{
"date": "2017-08-23",
"count": 1
},
{
"date": "2017-08-29",
"count": 1
},
{
"date": "2018-01-21",
"count": 1
},
{
"date": "2018-01-29",
"count": 1
},
{
"date": "2018-03-01",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 3
},
{
"date": "2018-03-15",
"count": 1
},
{
"date": "2018-03-19",
"count": 3
},
{
"date": "2018-03-21",
"count": 2
},
{
"date": "2018-04-07",
"count": 1
},
{
"date": "2018-04-20",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-25",
"count": 1
},
{
"date": "2018-06-19",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-27",
"count": 1
},
{
"date": "2018-07-11",
"count": 1
},
{
"date": "2018-07-30",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-16",
"count": 1
},
{
"date": "2018-08-24",
"count": 1
},
{
"date": "2018-08-25",
"count": 1
},
{
"date": "2018-08-26",
"count": 1
},
{
"date": "2018-09-04",
"count": 1
},
{
"date": "2018-09-06",
"count": 18
},
{
"date": "2018-09-07",
"count": 2
},
{
"date": "2018-09-10",
"count": 1
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2018-09-17",
"count": 1
},
{
"date": "2018-10-19",
"count": 1
},
{
"date": "2018-10-21",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2018-11-12",
"count": 1
},
{
"date": "2018-11-21",
"count": 1
},
{
"date": "2018-12-03",
"count": 2
},
{
"date": "2018-12-06",
"count": 1
},
{
"date": "2019-01-13",
"count": 1
},
{
"date": "2019-01-15",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-27",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-04",
"count": 1
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-27",
"count": 1
},
{
"date": "2019-05-03",
"count": 1
},
{
"date": "2019-06-17",
"count": 1
},
{
"date": "2019-06-23",
"count": 1
},
{
"date": "2019-06-24",
"count": 1
},
{
"date": "2019-06-25",
"count": 1
},
{
"date": "2019-07-05",
"count": 2
},
{
"date": "2019-07-25",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-09-17",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-30",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-11-18",
"count": 2
},
{
"date": "2019-11-19",
"count": 2
},
{
"date": "2019-11-20",
"count": 5
},
{
"date": "2019-11-21",
"count": 5
},
{
"date": "2019-11-24",
"count": 1
},
{
"date": "2019-11-25",
"count": 1
},
{
"date": "2019-11-26",
"count": 4
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-06",
"count": 1
},
{
"date": "2019-12-10",
"count": 1
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-18",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-25",
"count": 1
},
{
"date": "2020-01-01",
"count": 1
},
{
"date": "2020-01-07",
"count": 1
},
{
"date": "2020-01-20",
"count": 1
},
{
"date": "2020-01-21",
"count": 1
},
{
"date": "2020-01-22",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-02-03",
"count": 2
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-24",
"count": 1
},
{
"date": "2020-02-26",
"count": 1
},
{
"date": "2020-03-12",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-17",
"count": 1
},
{
"date": "2020-05-26",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-05-30",
"count": 1
},
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-20",
"count": 1
},
{
"date": "2020-07-20",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2020-10-20",
"count": 3
},
{
"date": "2020-10-21",
"count": 2
},
{
"date": "2020-10-23",
"count": 2
},
{
"date": "2020-10-26",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-11-11",
"count": 1
},
{
"date": "2020-11-12",
"count": 2
},
{
"date": "2020-11-18",
"count": 2
},
{
"date": "2020-12-07",
"count": 1
},
{
"date": "2020-12-08",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2021-01-14",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-02",
"count": 2
},
{
"date": "2021-03-03",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-11",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-04-27",
"count": 1
},
{
"date": "2021-05-25",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-07-01",
"count": 1
},
{
"date": "2021-07-20",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-09-27",
"count": 1
},
{
"date": "2021-10-07",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-12-02",
"count": 1
},
{
"date": "2021-12-25",
"count": 1
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-16",
"count": 2
},
{
"date": "2022-02-17",
"count": 2
},
{
"date": "2022-02-18",
"count": 7
},
{
"date": "2022-03-01",
"count": 1
},
{
"date": "2022-03-02",
"count": 7
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-05-03",
"count": 1
},
{
"date": "2022-05-18",
"count": 1
},
{
"date": "2022-06-02",
"count": 1
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-08-31",
"count": 1
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-09-28",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-29",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-14",
"count": 1
},
{
"date": "2023-01-22",
"count": 1
},
{
"date": "2023-01-26",
"count": 1
},
{
"date": "2023-01-27",
"count": 2
},
{
"date": "2023-03-27",
"count": 1
},
{
"date": "2023-04-10",
"count": 1
},
{
"date": "2023-04-27",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-08-11",
"count": 1
},
{
"date": "2023-08-13",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-05",
"count": 1
},
{
"date": "2023-10-11",
"count": 1
},
{
"date": "2023-11-24",
"count": 2
},
{
"date": "2023-11-28",
"count": 1
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2024-01-04",
"count": 1
},
{
"date": "2024-01-16",
"count": 2
},
{
"date": "2024-02-23",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-06",
"count": 4
},
{
"date": "2024-06-10",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-07-15",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-08-14",
"count": 1
},
{
"date": "2024-08-17",
"count": 1
},
{
"date": "2024-08-22",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-15",
"count": 1
},
{
"date": "2024-11-11",
"count": 1
},
{
"date": "2024-11-12",
"count": 2
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2025-02-27",
"count": 1
},
{
"date": "2025-03-12",
"count": 2
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-06-09",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-07-22",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-12-21",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-26",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
}
],
"complete": true,
"collected": 303,
"total_stars": 304
},
"open_issues_and_prs": 33
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"severity": "high",
"ecosystem": "packagist",
"cvss_score": 7,
"advisory_ids": [
"GHSA-499r-g7pc-vmp9",
"GHSA-g6xq-892h-64w3",
"GHSA-gjfg-22fp-rrxx"
],
"fixed_version": "2.10.2",
"advisory_count": 3,
"oldest_advisory_days": 1
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 3,
"affected_count": 1,
"assessed_count": 49,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 5,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "loophp/phposinfo",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.6 || ^1.7"
},
{
"name": "seld/jsonlint",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.7.1"
},
{
"name": "symfony/console",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^4.0 || ^5.0 || ^6.0 || ^7.0 || ^8.0"
},
{
"name": "vaimo/topological-sort",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0 || ^2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "loophp/phposinfo",
"direct": true,
"version": "1.8.0",
"ecosystem": "packagist"
},
{
"name": "seld/jsonlint",
"direct": true,
"version": "1.11.0",
"ecosystem": "packagist"
},
{
"name": "symfony/console",
"direct": true,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": "2.0.1",
"ecosystem": "packagist"
},
{
"name": "camspiers/json-pretty",
"direct": false,
"version": "1.0.2",
"ecosystem": "packagist"
},
{
"name": "composer-plugin-api",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/ca-bundle",
"direct": false,
"version": "1.5.11",
"ecosystem": "packagist"
},
{
"name": "composer/class-map-generator",
"direct": false,
"version": "1.7.3",
"ecosystem": "packagist"
},
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"ecosystem": "packagist"
},
{
"name": "composer/metadata-minifier",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "composer/pcre",
"direct": false,
"version": "3.3.2",
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": "3.4.4",
"ecosystem": "packagist"
},
{
"name": "composer/spdx-licenses",
"direct": false,
"version": "1.6.0",
"ecosystem": "packagist"
},
{
"name": "composer/xdebug-handler",
"direct": false,
"version": "3.0.5",
"ecosystem": "packagist"
},
{
"name": "justinrainbow/json-schema",
"direct": false,
"version": "6.8.2",
"ecosystem": "packagist"
},
{
"name": "marc-mabe/php-enum",
"direct": false,
"version": "4.7.2",
"ecosystem": "packagist"
},
{
"name": "mustache/mustache",
"direct": false,
"version": "3.2.0",
"ecosystem": "packagist"
},
{
"name": "pdepend/pdepend",
"direct": false,
"version": "2.16.2",
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": "9.3.5",
"ecosystem": "packagist"
},
{
"name": "phpmd/phpmd",
"direct": false,
"version": "2.15.0",
"ecosystem": "packagist"
},
{
"name": "psr/container",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "psr/log",
"direct": false,
"version": "3.0.2",
"ecosystem": "packagist"
},
{
"name": "react/promise",
"direct": false,
"version": "3.3.0",
"ecosystem": "packagist"
},
{
"name": "seld/phar-utils",
"direct": false,
"version": "1.2.1",
"ecosystem": "packagist"
},
{
"name": "seld/signal-handler",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": "3.13.5",
"ecosystem": "packagist"
},
{
"name": "symfony/config",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/dependency-injection",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/deprecation-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/filesystem",
"direct": false,
"version": "7.4.11",
"ecosystem": "packagist"
},
{
"name": "symfony/finder",
"direct": false,
"version": "8.0.8",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-ctype",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-grapheme",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-normalizer",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-mbstring",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php73",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php80",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php81",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php84",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/process",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/service-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/string",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/var-exporter",
"direct": false,
"version": "8.0.9",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-changelogs",
"direct": false,
"version": "2.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-local",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-proxy",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target1",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target2",
"direct": false,
"version": "1.2.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target3",
"direct": false,
"version": "1.2.3",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-file-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-search-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 54,
"direct_count": 5,
"indirect_count": 49
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 58,
"open_issues": 31,
"closed_ratio": 0.627,
"closed_issues": 52,
"closed_unmerged_prs": 15
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jooname",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/36262953?v=4"
},
{
"type": "User",
"login": "allanpaiste",
"commits": 82,
"avatar_url": "https://avatars.githubusercontent.com/u/3738135?v=4"
},
{
"type": "User",
"login": "cweagans",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/101590?v=4"
},
{
"type": "User",
"login": "zamoroka",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/9164112?v=4"
},
{
"type": "User",
"login": "fabianx-ai",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/354804?v=4"
},
{
"type": "User",
"login": "adamj88",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1053393?v=4"
},
{
"type": "User",
"login": "peterjaap",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/431360?v=4"
},
{
"type": "User",
"login": "KDederichs",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/24696606?v=4"
},
{
"type": "User",
"login": "ukgodzuki",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/240904750?v=4"
},
{
"type": "User",
"login": "Seldaek",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/183678?v=4"
}
],
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"phpcs.xml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"composer.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 2/10 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"ran_at": "2026-07-22T05:49:36Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T00:46:30Z",
"oldest_open_prs": [
{
"number": 101,
"created_at": "2022-08-23T11:18:30Z",
"last_comment_at": "2022-09-23T14:02:34Z",
"last_comment_author": "vaimo-wilko"
},
{
"number": 158,
"created_at": "2026-07-20T19:29:31Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-12T07:52:49Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 25,
"created_at": "2019-03-28T12:52:48Z",
"last_comment_at": "2024-07-09T10:23:58Z",
"last_comment_author": "peterjaap"
},
{
"number": 40,
"created_at": "2019-09-29T19:38:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2019-10-22T08:44:24Z",
"last_comment_at": "2019-10-23T07:21:56Z",
"last_comment_author": "allanpaiste"
},
{
"number": 46,
"created_at": "2019-11-06T10:36:54Z",
"last_comment_at": "2021-03-19T15:21:54Z",
"last_comment_author": "allanpaiste"
},
{
"number": 50,
"created_at": "2019-11-21T15:31:55Z",
"last_comment_at": "2019-11-22T09:22:32Z",
"last_comment_author": "4n70w4"
},
{
"number": 52,
"created_at": "2020-01-16T22:03:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2020-02-26T21:27:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2020-03-12T14:04:51Z",
"last_comment_at": "2020-05-22T11:57:23Z",
"last_comment_author": "allanpaiste"
},
{
"number": 57,
"created_at": "2020-03-16T07:42:23Z",
"last_comment_at": "2020-03-17T20:08:02Z",
"last_comment_author": "allanpaiste"
},
{
"number": 60,
"created_at": "2020-09-16T07:30:37Z",
"last_comment_at": "2020-09-28T08:20:36Z",
"last_comment_author": "allanpaiste"
},
{
"number": 61,
"created_at": "2020-10-22T12:01:40Z",
"last_comment_at": "2023-02-21T09:54:24Z",
"last_comment_author": "michaelarnauts"
},
{
"number": 64,
"created_at": "2021-02-04T13:11:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 66,
"created_at": "2021-02-05T07:59:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 68,
"created_at": "2021-02-17T15:54:33Z",
"last_comment_at": "2021-02-23T08:32:19Z",
"last_comment_author": "ihor-sviziev"
},
{
"number": 69,
"created_at": "2021-02-22T11:29:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 71,
"created_at": "2021-02-24T01:45:34Z",
"last_comment_at": "2021-02-25T07:59:20Z",
"last_comment_author": "allanpaiste"
},
{
"number": 72,
"created_at": "2021-02-24T11:22:56Z",
"last_comment_at": "2021-02-25T19:39:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 76,
"created_at": "2021-03-09T19:09:12Z",
"last_comment_at": "2021-04-13T20:57:12Z",
"last_comment_author": "chelevich"
},
{
"number": 77,
"created_at": "2021-03-19T15:47:03Z",
"last_comment_at": "2021-03-20T08:25:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 78,
"created_at": "2021-04-30T17:46:23Z",
"last_comment_at": "2022-05-17T21:49:15Z",
"last_comment_author": "djacques4gorilla"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/vaimo/composer-patches",
"host": "github.com",
"name": "composer-patches",
"owner": "vaimo"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 57,
"vitality": 77,
"community": 60,
"governance": 71,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 77,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 65,
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "65 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 65
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 39 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 39
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~37 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 37
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 39,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 39 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 39
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"forks": 45,
"stars": 304,
"watchers": 8,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "304 stars",
"points": 40.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 304
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "45 forks",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 45
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"dependents": 23,
"ecosystems": "packagist",
"total_downloads": 4670819,
"monthly_downloads": 91770
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "91,770 downloads/month across packagist",
"points": 66.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 91770,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "23 packages depend on it",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 23
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 71,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 35% of commits",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 35
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "36 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 36
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"merged_prs": 58,
"open_issues": 31,
"closed_issues": 52,
"issue_closed_ratio": 0.627,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "63% of issues closed",
"points": 29.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 63
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/73 decided PRs merged",
"points": 30.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 73
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 41,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "vaimo",
"public_repos": 117,
"account_age_days": 5251
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "41 followers of vaimo",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 41,
"login": "vaimo"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "117 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 117
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 39
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 39 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 39
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "204 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 204
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpcs.xml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 57,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 49 resolved dependencies against OSV; 5 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 49
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 5
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 1,
"assessed_packages": 49,
"unassessed_packages": 5,
"affected_by_severity": "high 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 49,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 41,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.56,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "56 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 29.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 56,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"composer.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpcs.xml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T05:50:02.169683Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/vaimo/composer-patches.svg",
"full_name": "vaimo/composer-patches",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit vaimo/composer-patches teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.26.0 — vollständige Methodik · Metriken-Wiki.
